AccidentalFinancial ServicesFinanceMisconfigurationCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumResolved

Curian Capital, LLC

bd_6163591721639b1b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 19, 2010

Filed

Jan 29, 2010

To disclose

10 days

Affected

706

Confidence

66%

Full breach record for Curian Capital, LLC →

Curian Capital, LLC experienced a technical fault in report generation on January 19, 2010, causing client fee statements containing names, account numbers, balances, and SSNs to be inadvertently posted to incorrect financial professionals' secure online filing cabinets. The error was identified and corrected within 24 hours. Approximately 706 clients nationwide, including one New Hampshire resident, were affected. Curian notified affected individuals via mail starting February 1, 2010, and implemented enhanced security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 days

Jan 19, 2010

Begins

Jan 19, 2010

Discovered

Jan 29, 2010

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed706 affectedView incident

Name: Curian Capital, LLC
norm: curian capital

Name: Curian Capital, LLC
norm: curian capital
Industry: Financial Servicesllm

Discovered: Jan 19, 2010
Breach occurred: Jan 19, 2010 – Jan 20, 2010
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 1, 2010
Affected individuals: 706state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unknown
Regulator citations: Notified State of New Hampshire Attorney General

During the incident: Promptly removed the statements from the incorrect financial professional’s secure online filing cabinet
Notified all of the approximately 706 clients that were potentially affected... by letter sent via first-class mail
Changes made: Implementing additional measures that will prevent such incidents in the future
Put enhanced security measures in place to ensure this doesn’t happen again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 days(10 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/curian-capital-20100129.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 29, 2010
Raw hash: 1209f686adbe766aff490d06ed27ac3b3e568fcee463f0cae484b188cee21a55

Reporting entityCurian Capital, LLC

Victim entityCurian Capital, LLC

Incidentdiscovered Jan 19, 2010

Stated responsePromptly removed the statements from the incorrect financial professional’s secure online filing cabinet

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov